Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File:                     Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier:          htZ8fMZUUe8LqNlxiE1jh1th/KrEIpgsNlT6o6WwfjM=
Subject key identifier:   B3:96:C4:7B:D1:DA:C1:FE:EC:EF:08:C6:7E:7D:D3:16:93:6A:EB:8A
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer:       /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial:       019845F6ACC744A6D0B8AED0B86A325BC364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number:          0181
Signing time:             Sat 26 Jul 2025 09:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:50 +0000
Files and hashes:         1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: Pnue+Hx68ZBO4vqaG0hgpD5mtdErBuN5Dc6IVD1vNmY=)
                          2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:ac:c7:44:a6:d0:b8:ae:d0:b8:6a:32:5b:c3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
        Validity
            Not Before: Jul 26 09:00:50 2025 GMT
            Not After : Jul 27 09:00:50 2025 GMT
        Subject: CN=b396c47bd1dac1feecef08c67e7dd316936aeb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:1b:c7:3d:86:2b:2e:65:a6:58:f4:8a:7e:
                    b8:1f:0b:6c:49:5e:93:fd:33:b2:8f:57:bc:69:40:
                    30:a4:5c:9e:b9:e4:b9:bf:8e:62:e0:8e:1b:c3:d7:
                    31:3d:82:96:ff:7e:93:7d:f3:06:71:88:9e:35:02:
                    87:39:56:ac:0c:16:7e:d5:84:5b:0c:3c:dc:52:72:
                    73:b4:f8:08:a3:28:9a:e9:2f:81:58:2e:6b:13:b3:
                    bb:f4:b5:18:b9:96:ee:b5:5e:52:d0:ff:8d:43:ea:
                    a8:e8:c2:22:f8:48:57:3c:a0:6b:21:a2:51:bd:19:
                    13:c4:58:57:b3:6b:ba:75:7c:06:96:21:e4:c6:4b:
                    df:e1:9f:d8:52:b4:a5:e3:4e:07:05:9e:71:52:3e:
                    09:92:9f:09:00:3d:e9:9e:d3:3b:48:5e:53:c9:cf:
                    0a:76:a3:e4:9e:b2:09:a3:d1:d3:10:4c:c0:34:4a:
                    bc:6e:0c:cb:4d:b6:e4:d5:f8:f4:c9:75:b6:3b:f4:
                    fb:7b:4c:51:98:e7:84:9f:14:21:bb:df:19:d5:bc:
                    fd:ea:f0:ca:f7:73:e7:be:1c:c9:50:83:41:87:8d:
                    57:4f:e1:e0:4e:e9:6c:28:02:03:eb:33:07:45:f7:
                    78:31:8e:62:6f:87:06:26:5a:fe:27:f3:b8:d8:be:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:C4:7B:D1:DA:C1:FE:EC:EF:08:C6:7E:7D:D3:16:93:6A:EB:8A
            X509v3 Authority Key Identifier:
                keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:d8:6d:a8:62:a9:ee:d3:54:45:44:04:fc:a4:59:e3:3d:
         7b:de:5c:4f:43:4d:d2:da:c1:8a:9a:e8:2f:99:13:8c:2a:a9:
         a0:23:65:27:2e:9d:5c:d4:eb:91:89:9b:ca:87:29:fe:24:28:
         e6:fe:64:cd:65:77:06:e2:35:52:c6:a3:63:10:58:74:5c:57:
         e1:21:8f:05:2e:c1:47:73:7f:d6:95:1f:94:fa:72:10:24:7a:
         42:a0:68:c6:41:20:45:eb:18:72:62:52:25:75:b7:8d:22:1b:
         44:24:98:f7:3c:03:4b:ba:97:68:87:bc:a1:da:00:c8:86:89:
         45:6d:fc:db:5d:e3:6f:c4:41:91:76:e7:e7:d0:7f:42:63:f9:
         13:67:c2:dc:e4:fb:13:34:b9:a8:1b:9c:54:d3:07:cc:14:71:
         67:88:58:a5:06:65:f8:30:d1:8a:c6:21:b5:69:6c:53:ee:d1:
         58:5f:a6:1d:f2:d7:31:6a:42:24:42:48:86:8d:ad:2d:8e:99:
         88:ea:ed:c5:b6:91:d9:b0:cf:02:b5:3e:99:eb:cf:dd:de:68:
         aa:bd:1d:25:d1:98:ad:9f:a5:03:98:c3:95:99:f8:1f:15:c1:
         ab:18:7b:eb:a1:96:30:7d:95:84:1e:a8:fc:92:f7:bd:b8:b6:
         53:92:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:43 2025 by rpki-client